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Semiconductor device, c^er, card reader, methods of initiaUzing and checking the 
authenticity . ^PO - DG 1 

•3- 04. 2002 

The. invention relates to a semiconductor device provided with a circuit, a 

security layer that covers the circuit and a security element comprising a local area of the 

security layer and a sensor. 

The invention also relates to a carrier provided with a semiconductor device 

5 and a card reader. 

The invention further relates to a method of initializing and a method of 
checking the authenticity of the semiconductor device. 

Such a semiconductor device and such a carrier are known from EP-A 300864. 

10 The security element of the known device is a capacitor with as sensor two capacitor 

electrodes that are coupled capacitively together by the security layer. The device comprises 
a plurality of security elements by preference. On checking the authenticity of the device, a 
measured voltage is compared to a calculated reference voltage. If there is a difference, the 
authenticity is not recognized. The carrier on which die device is present, is a smartcard. 

15 It is a disadvantage of die known device, that the security elements may be 

circumvented. The security elements may be replaced by otiier sti^ctures with tiie same 
capacity which let the underlying cireuit free. Further on, tiie removal of the security layer 
and the electrodes cannot be detected, if the electrodes and the security layer are reappUed 
afterwards. Such removal is done in order to look at, to probe electrically and/or to modify 

20 the circuit. 

It is therefore a first object of tiie invention to provide a semiconductor device 
of ttie kind mentioned in tiie opening paragraph, of which removal of tiie security layer can 
be detected afterwards. 

25 It is a second object of tiie invention to provide a carrier with an improved 

detection of hacking. 

The first object is realized in that: 
- the security layer comprises embedded magnetic particles, and 
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- the sensor is a magnetic sensor, therewith enabling measurement of a magnetic property 
of the security layer. 

The second object is realized in that the carrier comprises the semiconductor 
device of the invention. 

The use of magnetic particles has the advantage that they are in principal inert 
and that its properties are stable. Further on, it is not or hardly possible to provide after 
removal a security layer with the same magnetic propertiek'as the original s^iurity Isl^ox. A 
removal of the security layer can be detected in that an actual value is compared to an initial 
value at an initialization that has been stored in a memory as reference value. The memory 
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10 can be present in the semiconductor device. This has the advantage that one and die same 

value is available at two places in the semiconductor device, and that communication with an 
external, central database device is not necessary to check the authenticity. Alternatively, the 
memory can be present external to the semiconductor device. This has the advantage that it 
is not possible to modify the memory and the security layer, such that both the reference 
15 value and the actual value are different from the original values, but nevertheless equal. 
Preferably a plurality of security elements is present. 

In a preferred embodiment, the magnetic sensor is a magnetoresistive srasor, 
therewith enabling the conversion of the magnetic properties into an impedance value. With 
the magnetoresistive sensor the magnetization that results from the distribution of the 
20 particles, are transformed into impedance values. Thus, the impedance can be measured on 
line. This has the advantage that any actual value of the impedance can be further processed, 
digitalized and stored in an easy and principally known manner. In the context of this 
application, the term 'impedance* relates to the impedance as measured in the 
magnetoresistive sensor. This impedance is in fact an impedance induced by momentaneous 
25 changes in the magnetisation in the security element. These changes can be provided by 
changing the magnitude of an external magnetic field, and especially by switching such 
external magnetic field on and/or off. The impedance of the magnetoresistive sensor is 
generally obtained as tiie difference between the sensor voltages in the reference state and in 
a magnetic field, which difference is divided by the sensor current used in the 
30 magnetoresistive sensor. The voltages are preferably the voltages of a Wheatstone bridge 
present in the sensor. 

In a further preferred embodiment, the embedded magnetic particles are 
inhomogeneously distributed over the circuit. Due to tfie inhomogeneously distributed 
particles the security element has an impedance that is specific and unpredictable. The 
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inhomogeneous distribution of magnetic particles in the security layer over the circuit can be 
realized in various ways. If the layer is prepared from a particle suspension containing a 
solgel precursor, an inhomogeneity in the distribution of particles will naturally be present. 
This inhomogeneity can be further enhanced by variation in the suspension parameters, for 
5 instance by deliberately creating an unstable suspension. Another possibility is by deposition 
according to a desired pattern. It is advantageous that the suspension comprises a sol-gel 
precursor, such as a precursor for silica, titania, ziiconia, or alurainophosphates. The 
inhomogeneity can be of chemical nature - e.g. chemically different magnetic particles or 
different compositions of magnetic particles - and of physical nature - e.g. different particle 

10 sizes, or otherwise. 

In a further embodiment the inhomogeneous distribution is provided by the 
addition of non-magnetic particles. This has the result that not only the lateral position of the 
magnetic particles, but also or even mainly the vertical position of the magnetic particles 
varies over the circuit. As will be understood, the terms 'vertical' and 'lateral' are used in fliis 

15 context with respect to a plane of reference parallel to the security layer . 

The magnetic particles can be any kind of magnetic particles, such as ferro-, 
and fenimagnetic particles. Ferrite particles, such as BaFeizOis, could be used. If the nature 
of the precursor suspension is incompatible with the magnetic particles, the magnetic 
particles can be protected by enc^sulation, for example in SiOi or in a polymer. 

20 As is known to a person skilled in the art, magnetic particles can be subdivided 

on the basis of their hardness. A parameter for this hardness is the strength of the coercive 
field He. A second parameter characterizing the hardness of a magnetic material is the ratio R 
between the remanent magnetization M, to the saturation magnetization Man. The remanent 
magnetisation is defined as the magnetization at zero external field, obtained after a magnetic 

25 saturation step. Softtnagnetic materials that are suitable for transformers and inductors have a 
He that is small in an absolute sense and have R«l. Magnetic materials with a larger He and 
a large R are used for magnetic recording or even as permanent magnets - together also 
referred to as hardmagnetic materials. Both soft- and hardmagnetic materials can be used in 
the device of the invention, however in different embodiments. 

30 In a first embodiment, magnetic particles of a softmagnetic material are used, 

which particles have a diameter on a submicronscale, and preferably of less than 100 
nanometer. Such particles are known as superparamagnetic particles and are ferro- and 
ferrimagnetic particles which are so small tiiat, in the absence of an external field, tiieir 
magnetisation fluctiiates on a time scale that is much shorter than tiie time period during 
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which a magnetisation measurement is carried out. Preferably, a plurality of these particles is 
provided in an inert, micrometer-sized matrix, and as such present in the security coating. 
Such a matrix with superparamagnetic particles is commercially available and known as 
microbead. The softmagnetic material is for instance magnetite or a cubic ternary ferrite. 
5 With such materials a short measurement time of less than 1 second, preferably in the order 
of 0.001 - 0.1 seconds, can be realized. This is due to the small response time to the 
application of a magnetic field of superparamagnetic nanoparticles made of these materials. 

The response time is given by an Arrhenius expression, according to which the response 

time is an exponential function of the product of the magnetic anisotropy energy density and 
10 the particle volume. 

The advantage of the superparamagnetic particles is that their magnetisation M 
fluctuates on a time scale that is much shorter than the time period in between of two 
measurements. As a consequence, the resultant magnetisation field Hy/^sx parallel to the 
security layer and at a specific magnetoresistive sensor Sx can be assumed to be zero at the 
15 beginning of a measurement. Upon appHcation of an external magnetic field, a magnetisation 
is induced in the direction parallel to this external magnetic field. This magnetisation induces 
a magnetic dipole field around the particles, which has a significant component perpendicular 
to the externally applied magnetic field and substantially parallel to the security layer. The 
resultant magnetisation field H[y^x will be different and will induce changes in the resistivity 
20 of the magnetoresistive sensors. The magnitude of the resultant magnetisation field H>/^x will \ 
be dependent on the amount of particles, the distance and location with respect to the 
magnetoresistive sensor. 

In a second embodiment, particles of a hard-magnetic material - hard- 
magnetic particles - are used. The hard-magnetic particles can be of any kind or size, and 
25 preferably have an average diameter ranging from 0.1 to 3 microns. This average diameter is 
by far preference smaller than the thickness of the security layer, which however can be as 
thick as 10 microns or more. 

Two sub-classes of hard-magnetic particles are distiguished. If the coercive 
field of the particles is much larger than the maximum field that can be allowed to be applied 
30 to the chip during its lifetime, the magnetization direction of each of the particles will be 
permanentiy fixed after magnetizing them once during the fabrication process. The 
measurement of the value of the security elements does then comprise the step of measuring 
the resistance of the sensor, without the application of an external magnetic field. This value 
is compared directiy to the reference value obtained after the initialization step. 



I 



PHNL020278EPP 

^ o- 

5 08.04.2002 
Within the second sub-class, ah external magnetic field must be applied in 
order to induce the magnetisation. Within this second sub-class» the coercive field of the 
particles is smalls than or approximately equal to the maximum field that can be allowed to 
be applied during the lifetime of the chip. The application of a field larger than the coercive 
field changes the magnetic state of the particles. The particles must therefore prior to each 
measurement be brought into a reference state, in order to remove influences of any 
uncontrolled previously applifeS external magnetic field. A suitable example of a preliminary 
treatment is degaussing. In this treatment, generally applied in cathode ray tubes, an 
alternating magnetic field is applied. The strength of this field is initially equal to or larger 
than a saturation field of the hardmagnetic particles, but is reduced at every alternation to end 
at a standard value, in general a zero field. 

The measurement of the value of the security elements with haidmagnetic 
particles within this second sub-class can be the same as for the particles of a softmagnetic 
material. This will comprise the steps of measuring a resistance of the sensor at a reference 
state in zero applied field, applying an external field in a direction substantially perpendicular 
to the plane of the security layeri said external field having a strength of at least the saturation 
magnetic field, and measuring the resistance again. The second measurement is preferably 
started £tfter the resultant magnetisation field H//,sx has reached its saturation value and 
stopped before the external field is switched off. 

Alternatively, with the advantage that the level of security is enhanced, and 
with the advantage that the application of the external field has no or a weaker direct 
influence on the resistance of the sensor, the external field can be zero or of a strength below 
the saturation magnetic field of the hardmagnetic particles. In a phase prior to the 
measurement the field can further be applied in a degaussing manner to end up around said 
bias value below the saturation magnetic field. Subsequently, a measurement is carried out A 
special case is that in which the measurement is carried out at zero field. 

It is possible to create a well defined remanrat state of the magnetic-particles 
that is different firom that in the reference state by making use of a variation with time of the 
external field prior to the measurement that is different than that used for obtaining the 
reference state. The resultant resistivity that is measured is thus not only dependent on the 
size and specific distribution of the magnetic particles in the security layer, but also on their 
detailed hysteretic magnetic response to a time dependent magnetic field. This enhances the 
level of security for two reasons. Firsfly, a prediction of the remanent magnetization of a 
particle after a degaussing procedure on the basis of a measurement of only the volume and 
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of the ftill hysteresis loops is in practice impossible, because the so-called inner hysteresis 
loops depend on detailed internal magnetic states of the particle that are not probed when 
measuring a full magnetization loop, and because such inner loops are already strongly 
modified by weak and in practice non-detectible random variations of the particle properties. 
5 Secondly, the sensor responses obtained after many different degaussing procedures can be 
compared to those obtained in a corresponding way in initialization procedure. Such 
responses are very specific and are to be considered as a 'magnetic signature'. The 
degaussing procedures can be varied in length and character as wUl be clear to the skilled 
person in that field. Also, use can be made of the full time dependence of the response. 
"j[5 In a further embodiment, superparamagnetic particles, or a mixture ot siwR 

particles, are chosen such, tiiat its or their relaxation time is comparable to the measurement 
time. As a consequence the time dependence of the resistivity can be used in addition to the 
absolute value of the resistivity. This time dependence of the resistivity can be measured by 
the magnetoresisti ve sensors after the application of a - sudden - fixed magnetic field. 
15 In an advantageous embodiment the first security element comprises a 

Wheatstone-bridge having a first pair of magnetorcsistive sensors and a second pair of 
sensors, the sensors of which first and second pair are provided with substantially the same 
resistance versus magnetic field characteristic. Such characteristic is implemented through 
the physical and the magnetic stracture, e.g. the sensors have the same size and contain the 
20 same material, and the pinned layer is in all the sensors of the bridge pinned in the same 

direction. Through the use of a Wheatstone bridge the sensitivity of the security element for 
variations in the impedance is increased, since not the impedance itself, but a difference in 
impedance between the first and the second magnetoresistive sensors of the first pair - and 
optionally the second pair - is measured. Besides, with a Wheatstone bridge the measurement 
25 is independent of temperature changes, and compensates for a constant background field. 
This Wheatstone bridge is known per se by the person skilled in the art of magnetoresistive 
sensors. The term Wheatstone bridge is understood to include, in the context of this 
appUcation. a so-called half Wheatstone bridge comprising a first pak of magnetoresistive 
sensors and a second pair of identical non-magnetic elements; a full Wheatstone bridge 
30 including a first and a second pair of magnetoresistive sensors; and any variant on a 

Wheatstone bridge. The magnetoresistive sensors can be of various type, such as OMR, TMR 
and AMR and are known per se. Next to a standard magnetoresistive sensor as is described 
with reference to the drawings more complex sensors can be used. Examples thereof are spin 
valves with dusting layers, specular spin valves, spin valves witii artificial antiferromagnets 
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as pinned layers. -If there is a passivation layer under the security layer, the magnetoresistive 
sensors may be present on either side of this passivation layer. 

In a further embodiment the security element has a construction that the 
magnetoresistive sedsors having an axis of sensitivity substantially parallel to the security 
5 layer are shaped as stripes that have a length in a direction substantially perpendicular to the 
axis of sensitivity. Hie magnetoresistive sensors of this embodiment are robust in die sense 
that a deviation of tiie magne^<?. field from the direction^erpendicul^trcto the security layer is 
not harmfid. Generally such a deviation is harmful if it saturates the sensor. 

Preferably, the passivation structure comprises a plurality of security elements. 
10 These elements can all be security elements comprising at least one magnetoresistive sensor. 
However, it can be as well, that various types of security elements are present. Other types of 
security elements include capacitors, resistors, inductors and combinations thereof, wherein 
the passivation structure comprises a layer with a varying dielectric constant laterally over 
the circuit 

15 As will be explained in more detail below, the impedance measured in the 

security element must be converted into a signal that can be stored in a memory, either inside 
the semiconductor device or in any reader or database connected to the reader. For this aim, 
conversion means are present to convert an output voltage from the first security element into 
an actual value of the first impedance. The conversion means may be of well-known nature, 

20 such as an A/D-converter or any circuit based on a comparison with a pre-^etermined clock- 
frequency. 

The carrier of flieinvention may be a smartcard, a record carrier such as an 
optical disc, a security paper such as a banknote. 

25 It is a third object of flie invention to provide a card reader with which the 

authenticity of the semiconductor device of the invention can be checked. 

The third object is realized in a card reader suitable for a card witii a 
semiconductor device of the invention, in which card reader magnetisation means are present 
in order to generate an external magnetic field that will induce a magnetisation in the 

30 magnetic particles substantially perpendicular to the security layer. The external magnetic 
field to be generated has preferably a strength in the order 10-100 kA/m. Examples of 
magnetisation means include a coil and a permanent magnet. If a coil is used, it may be 
provided with a core, for instance of ferrite material. Further on, a number of coils or 
magnets that are placed in parallel to each other, and are electrically connected in series may 
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be used. Such a construction appears advantageous in that a field in substantially one 
direction is generated. A preferred number is two if a field in one direction is desired. If a 
field in three directions is desired, the preferred number is six. The actual card reading part of 
the card reader is preferably present in between of the coils or magnets of the magnetisation 
5 means. 

Preferably a reference sensor is present in de card reader in ordcfr to measure 
the external magnetic field. WithSsaid measurement the magnetic field can be calibrated. 
Further on, the card reader may contain heating means, such as an infrared lamp or another 
local heat source, or the provision of a flow of fluid or gas at a specified temperature. A 
10 thermometer may be present as well. 

In a further embodiment, the coil of the card reader is part of a degaussing 
circuit Such a degaussing circuit is per se known from the art of cathode ray tubes. It may be 
used to provide an adequate magnetisation of permanent magnetic particles, such that any 
prior existing magnetisation becomes irrelevant. A prefexred example of a degaussing circuit 
15 comprises a dual PTC thermistor, and a shunt capacitor parallel to the coil to prevent 
disturbances. 

It is a fourth object to provide a method of initializing the semiconductor 
device of the invention. 

20 It is a fifth object to provide a method of checking the authenticity of the 

semiconductor device of the invention. 

The fourth object is realized in a method of initializing the seniiconductor 
device of the invention, in that 

determining an initially actual value of the impedance of the security element, and 
25 storing the initially actual value as the reference value in a memory. 

The fifth object is realized in a method of checking the authenticity of the 
semiconductor device of the invention, the device being initialized, comprising the steps of: 

- determining an actual value of the impedance of the security element, and 

- reading the reference value from the memory, 

30 - comparing the actual value and the reference value, and 

- recognizing the authenticity of the senaiconductor device only, if the difference between 
the actual value and the reference value is smaller than a predefined threshold value. 

The method of initializing the semiconductor device is necessary, in that 
before the initialization no actual value of the impedance of the security element is known. 
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The method of checking the authenticity has the advantage that both the actual value and the 
lefeience value are available and can be compared. The actual value is available and 
physically fixed in the semiconductor device. The reference value can be available in the 
semiconductor device, but is alternatively available in a central database device to which the 
5 card reader has access, or which is incorporated in the card reader. The reference value could 
also be present both in the semiconductor device and in the central database device. It will be 
understood that the method can be repeated in case that a pluraUty^ jC)>f ^eciigity. elements is 
present. 

The predefined threshold value is generally very small, e.g. preferably below 
10 S% of the reference value, and to be defined in order to correct uncertainties of measurements 
or influences of temperature and other external conditions. It is being mentioned that under 
normal conditions there will be a plurality of security elements, each with their own 
impedances. It can thus be expected that all impedances, or at least a part of them, must be 
compared to the corresponding reference values, before the authenticity of the semiconductor 
15 device can be recognized completely. 

If the reference value is stored in a memory of the central database device, the 
method of checking the authenticity can be interpreted as a method of identifying the 
semiconductor device as well; e.g. instead of checking whether the actual value is equal to 
the reference value belonging to an already known identity of the semiconductor device, the 
20 actual value can be used to find a corresponding reference value in the database, and 
therewith the identity of the semiconductor device. The use of the reference values in 
connection with a central database device is generally referred to as a unique chip identifier 
code. .« 

In a preferred embodiment, the step of determining the actual value comprises 

2S the steps of: 

- measuring an off-state value at a standard external magnetic field; 

- generating an external magnetic field to, induce a magnetisation in the magnetic particles 
substantially p^endicular to the security layer; . , », 

- measuring an on-state value before the external magnetic field is switched off, 

30 - determining an actual value of the impedance as the difference between the on^-state value 
and the off-state value, , 

As explained above, only the magnetic particles of which the magnetization 
can be permanentiy fixed, can be measured directly. For other magnetic particles it is 
necessary to apply an external magnetic field before measuring. This external field' is 
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preferably generated in the card reader. In order to have a caUbrated actual value, it is 
measured as the difference between an off-state value at standard, preferably zero external 
field, and an on-state value at the external magnetic field 

In the case that the magnetic particles or at least part thereof contain a hard- 
5 magnetic material, a preliminary treatment is necessary to remove existing magnetisation in 
the magnetic particles in the direction substantially perpendic.ular to the security layer. Such a 
prelinainary treatmen|jCan be a degaussing treatment, such as^described above in more detail. 

In the case that the magnetic particles or at least part thereof contain a soft- 
magnetic material, a relaxation measurement can be done comprising the steps of: 
"To ' generating an external magnetic field to induce a magnetisation in the magnetic particles 
substantially perpendicular to the security layer, 

- measuring a first and a second value before the particles of the softmagnetic pardcles are 
relaxated to their saturation magnetisation, and 

- determining the actual value of the impedance of the security element as the difference 
15 between the first and second value. 

This relaxation measurement offers a specific response. The number of values 
to be measured depends on the relaxation time of the soft-magnetic material, which is known 
per se. The actual value is determined as the difference between the second and first value, in 
order to correct for drift effects. If a large number of values is measured, the difference can 
20 be calculated between the measured value and the first value, or between consecutive values. 
The measurement can be optimized in that after measuring the first and second value an 
external magnetic field is generated in the opposite direction and further values are measured. 

These and other aspects of the semiconductor device and the methods of 
25 initializing it and checking its authenticity according to the invention will be further 
explained with reference to the drawings, in which: 

Fig. 1 shows a diagrammatical cross-section of the semiconductor device; 
Fig. 2 shows a diagrammatical cross-section of a security element in the 
semiconductor device; 
30 Fig. 3 A shows a diagrammatical top- view of the security element; 

Fig. 3B shows a electrical scheme corresponding to the security element 
shown in Fig. 3 A 
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Fig. 4A-C show graphs of the appUed field, the magnetisation and the 
measured voltage difference as a function of time for the:embodiment with magnetic particles 
of supetparamagnetic material; 

Fig. 5A-C show graphs of the applied field, the magnetisation and the 
5 measured voltage difference as a function of time for the embodiment with magnetic particles 
of hard-magnetic material, wherein measurement takes place at the saturation field; 

?ig- .6A-rC shg^, graphs of the applied field, the. magnetisation and the 
measured voltage difference as a fimction of time for the embodiment with magnetic particles 
of hard-magnetic material, wherein measurement takes place at a field of less than the 
10 saturation field; and 

Fig. 7 shows a schematic diagram of the semiconductor device. 

The figures are schematically drawn and not on scale, and the equal reference 
numbeis in different figures refer to corresponding elements. It will be clear to the peraon 
skilled in the art, that alternative but equivalent embodiments of flie invention are possible 
within deviation of tiie tiiie inventive concept, and ttiat the scope of the invention wiU be 
limited by the claims only. 

In Figure 1 the semiconductor device 11 has a substiate 31 of silicon, having a 
- first - side 32. On tiiis side 32. tiie device 1 1 is provided with a first active element 33 and a 
second active element 43. TTiese active elements 33, 43 are in this example bipolar transistors 
with emitter regions 34, 44. base regions 35. 45 and coUector regions 36.46. Said regions 34- 
36, 44A6 are provided in a first layer 37. which is covered with a patterned insulating layer 
38 of siUcon oxide. The insulating layer 38 is patterned such tiiat it has contact windows at 
tiie emitter regions 34, 44 and the base regions 35. 45. As known to tiiose skiUed in the art, 
field effect transistors can be present instead of or besides the bipolar transistor. As ixirther 
known to those skilled in the art, otiier elements, such as capacitors, resistors and diodes can 
be integrated in the semiconductor device H. The active elements are interconnected so as to- • 
fonn a circuit 

At these contact windows in tiie insulating layer 38, the said regions are 
connected to intereomiects 39. 40, 41. 42. The intereomiects in this embodiment extend on a 
first level and a second level. As is generally known, the intereomiect struchue can contain 
more levels. Between tiie interconnects and tiie active elements a not-shown banier layer is 
generally present. The interconnects 39, 40,41,42 are manufactiared, for example in Al or in 
Cu. in a known manner and are covered and mutually insulated tiirough dielectric layers 47, 
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that preferably have a low dielectric constant. Additionally present barrier layers are not 
shown A third level interconnect 28 is present to connect the security element 12. 
comprising a first and a second magneto-resistive sensor 121 . 122 and a local area of a 

passivation structure 50. 

This passivation structure 50 contains in this embodiment a passivating layer 

52 of Si.Ny in a thickness of 0.60 pm. Under ihe passivating layer 52 a further layer of 
phosphosilicateglas,.^an be present. The passivation struct^. further contains a security 
layer 53 of aluminophosphate in a thickness of 2-10 Mm. in which magnetic particles are 

i. Also liOz arid Til ' T paiaclcs a i- c pr e sen t i n order to 5 t abi1t7P , thfi Sflcun^ l»ver 53, 
n-sparencyx>Hhe-layerr-A.--nGt-shown---planarizingJay6rtn^ 
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present below the passivating layer 52. This security layer 53 was applied by spmcoaUng a 
composition of 15 % by weight monoaluminumphosphate, 20-50% by weight of particles m 
water, and subsequent drying at about 100-150 "C. Alternatively, it can be applied by 
spraycoating a composition of 5-10% by weight monoalmninumphosphate. After drying, the 
layer is amiealed at 400-500 to allow condensation, due to which a tiransition from the 
fluid to the soUd phase takes place. On the security layer 52 an epoxy material is present as 
package 54. The security layer 53 may be patterned, so as to facilitate sawing of the wafer 
into separate dies, and to define contact pads for connection to aPCB for example. 

The sensors 121. 122 ace at a mutual distance of about 1 micrometer. Their 
functioning will be explained in more detail with reference to the figures 2.and 3. Hie sensors 
121 122 may be present at larger mutual distances. If however the distance is smaller than 2 
mi^ons. the measurement in improved. This is due to the fact tiiat ma^etic particles ti»at are 
present in between of the sensors will induce magnetisations in opposit^^.directions in the 
sensors, and thus to different changes in the impedance. 

Fig. 2 shows a diagrammatical cross-section of a detail of the security element 
12- The magnetoresistive sensors 121, 122 comprise each a stack of four main layers: a 
piiming layer 61, a pinned layer 62, a spacer layer 63-and a ftee layer 64. The pinning layer 
61 is an antifenomagnet. in this case a lOmn thick Xr^Mnso layer. It may be insulated from 
the underlying structure through one or more buffer layers, such as 3 mn thick laye« of Ta 
and/or NiBoFe^o- The pinned layer 62 - in this case 6 mn Co - has a magnetisation that is not 
variable due to the influence of the pinning layer 61. It is preferred that the magnetisations of 
the pinned layer 62 of the magnetoresistive sensors 121. 122 are in paraUel directions. The 
output voltage of the bridge is then not sensitive to a uniform external magnetic field. The 
spacer layer 63 comprises in die preferred case of a GMR sensor a conductive material, such 
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as Cu with a thickness of 3 nm. In tfie case of a TMR sensor an insulating material such as 
AI2O3 with a thickness of 1 nm is applied. The free layer 64 conqyrises a soft-magnetic 
material like NigoFeao in a thickness of about 6 nm. 

Fig. 2 shows the situation that in the security layer 53 thwe are three 
superparamagnetic particles present near to the magnetoresistive sensors 121,122, of which 
the axis of sensitivity is parallel to the direction of the magnetization in the pinned magnetic 
layers 62 (the x-dxis). The particles are of different size and are present at different distances 
and migles with respect "to the sensors 121,122. After application of a magnetic field that is 
oriented perpendicular to the plane, with a time dependence that will be further explained 
with reference to Fig.4, a perpendicular magnetisation will be induced in the particles.This 
result in a dipolar field around the particle, as indicated in the figure schematically by 
magnetic field lines. The dipolar field from the magnetic particles A, B and C will exert a 
magnetic torque on the magnetization of the free layers 64 of the sensors 121, 122, which in 
the absence of the dipolar fields are oriented substantially parallel to the y-direction (i.e. the 
direction perpendicular to the pjlane of tfie paper). The torque d^nds on the distance along 
the X and z (popendicular to the layer plane) directions b&tween'the particles A, B, C and Ae 
sensor, and is proportional to the strength of the magnetisation of the particles A3,C. As a 
consequence, rotations of the magnetisations are induced in the free layers 64. The directions 
and sizes of these magnetisation rotations are determined by the directions and sizes of the 
effective Gayer averaged) x-components of the magnetic fields induced by the magnetic 
particles A,B,C. The magnitude of these fields, at distinct positions in the sensor plane, is in 
the figure indicated through the lengths of the arrows. As a consequence, there is a net 
magnetisation rotation to the right (i.e. towards the positive x-diiection) in the first sensor 
121 and a net magnetisation rotation to the left in the second sensor 122. The net x- 
component of the magnetisation of the free layer 64 in the first s&asat 121 is therewith larger 
than that of the free layer 64 in the second sensor 122. Tlie resistance of the magnetoresistive 
sensors 121,122 depends on the angle between the magnetization directions of the the pinned 
and flie fi«e layer 62,64. As a consequence, the resistance of the sensor 121 is decreased 
compared to avera^, whereas the resistance of the sensor .122 is increased. 

Pig. 3a shows a diagrammatic top-view of the security element 12. Fig. 3b 
shows an equivalent electrical scheme. The security element 12 is a Wheatstone bridge. The 
parts 123, 124 can be either equal non-magnetic resistors or magnetoresistive sensors, 
preferably of the same type as sensors 121, 122. Although preferred, it is not necessary that 
the parts 123,124 have the same physical dimensions as the. sensors 121,122. The security 
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element 12 includes next to the parts 121-124 and the non-shown security layer electrodes 
131-134. The first electrode 131 is current input, the secqnd and the third electrode 132,133 
are mutually connected via a voltage measurement. Conversion means are present to convert 
an output current or voltage from the security element into an actual value of the impedance. 
5 The conversion means will be further explained with reference to Fig. 7. The fourth electrode 
134 is current output. It is observed that the shape of the Wh^atstone bridge as shown in 
Fig.3a isnot essential^^or the emb(^ent This^is du^to tiie^andomn^ss of the.distribution 

of the magnetic particles. 

Figures 4, 5 and ^ show graphs oi the applied held, cne magnedsadon aiid diu 

measured voltage difference for three embodmaents of the mvenuon. Figur^TeMesno-th 

embodiment with superparamagnetic particles. Figures 5 and 6 relate to the embodiment with 
hardmagnetic particles of which a reference state is defined prior to the measurement. In 
Figure 5 measurement at the saturation field is shown, whereas in Figure 6 measurement at a 

degaussed field of less than the saturation field is shown. 
15 When using superparamagnetic particles the magnetisation of the particles is 

zero before the application of an external field. Therefore one can do a off-state measurement 
of the output voltage of the Wheatstone bridge immediately. This measurement will begin at 
tR3 and end at tR,B. Thereafter one applies the external magnetic field Happ at to- This will lead 
to an increase of the magnetisation of the particles M to its saturation value Msat, on a time 

20 scale that is determined by the relaxation time or the relaxation time distribution of the 
particles. Thereafter, the magnetisation is stable as long as the field Happ is present, and a 
measurement of the voltage difference AV can be done. This on-state measurement will 
begin at te and end at ts. Finally at t,, the external magnetic field Happ will be switched off 
and the magnetisation M and the voltage difference AV wiU reduce to their reference values. 

25 The actual value is determined as the difference between the on-state measurement and the 
off-state measurement Alternatively, the measurement of the voltage difference can be 
carried out as a function of the time. This is of most interest if the relaxation time is of the 

order of the time t,. . . : . ; 

When using hard-rnagnetic particles of which the coercive field is smaller than 
30 or of the same order of magnitude as the maximum uncontrolled external field that is 

allowed, a pretreatment is necessary to remove any remanent magnetisation. A preferred 
method therefore is a degaussing tireatment. In such a degaussing treabnent, as shown in Fig. 
5A, an osciUatory external magnetic field is applied with alternating directions and 
decreasing maximum strengtiis. Thereafter tiie off-state measurement is done, die external 
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field Happ is applied at to and the on-state measuiement is clone from tB,i to The actual 
value is again determined as the difference between the coi-state and the off-state value. After 
switching off the field Happ at ti. a remanent magnetisation will still in general be present. 
This remanent magnetisation, which is a materials* property, can be used for an additional 

5 measurement, from ta^t to ts^. 

Alternatively, the measurement can be preceded by a degaussing treatment in a 
spedfeed mannerfe is (kfeiiit fix>m that iised for obtaiiiing the ref^fence state, etg. 
degaussing around a certain bias field, as is shown in Figure 6. The subsequent measurement 
can take place at a finite field, e.g. the bias field around which degaussing has taken place. It 

10 can also take place after switching off the external final field. 

Fig. 7 shows a schematic diagram of an embodiment of the semiconductor 
device 11 together with an access device 2. The semiconductor device 11 comprises various 
means: measuring means 4, memory 7, control means 8 and a verification control 9. Further 
on, the semiconductor device comprises a pluraUty of security elements 12, as well as a 

15 switch 10. The memory 7 comprises a plurality of memory elCToients 7A, 7B, 7C. .... as well 
as a storage control 5 and read control 6. The control means 8 and the verification control 9 
may be integrated into one function, this being a microprocessor, or a dedicated circuit. The 
control means 8 need not to be dedicated solely to the control of the measuring, storing and 
reading of the impedances of the security elements 12, but may control the functioning of the 

20 complete semiconductor device, including a further memory with financial or identity data. 
The access device 2 is generally a card reader, but may be another device, for instance an 
apparatus with which the initialization is done. - ' - 

The exemplary circuit in the semiconductor device 11 functions as follows: a 
signal is sent from the access device 2 to the semiconductor device 11, requesting the 

25 initialisation or authenticity check. Via control means 8 values of the impedances of the 
security elements 12 are measured, and with a frequency depending on the impedance they 
are sent to conversion means 4, and then via a switch 10 to the memory 7. The conversion 
means generally include an oscillator, a counter and a reference oscillator to provide a clock 
frequency, or a standard A/D converter. The result is a dig^talized signal, that is the actual 

30 value of the impedance of the measured security element. It may be present in any kind of SI- 
unit, but also in any device specific value, if it is not to be compared with any externally 
measured value. Depending on the switch 10, the actual value may be stored or provided to 
the verification control 9. The switch is preferably switchable only once, for example in that 
it comprises a fuse. It is not excluded, as will be apparent to the skilled person, that the 
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switcH^lO and the storage control 5 are integrated into one functional unit The verification 
control-9 will compare the actual value and the reference value. If the difference between 
both values is smaller than a predefined threshold value, for instance 3%, then a positive 
signal ~ stating okay - will be sent to the control means 8. This can be done immediately, or 
5 after comparing all the actual values with all reference values, or after comparing a selected 
number of the actual values with the corresponding reference values. The predefined 
threshold value will*lSe dependent on the preciSibn ofthe n&uxing riie^s. It could l)e 10 or 
20% as well, especially if the number of security elements is large, for instance 10 or more. It 
could be less than 1% as well, which is partially dependent on the customer's wishes and the 
10 state of the art of integrated circuit design. 



PHNIj020278EPP 



CLAIMS: 



17 ^ ff^ 08.04.2002 



1. A semiconductor device provided with a circuit, a security layer that covers 

the circuit and and a security element comprising a local area of the security layer and a 
sensor, ^ f^. u. . leJd, r v.etis: 

■"3-!i.r .1" "•-•Je-di"' -.• - . . 
characterized in that* . - r. 

- the security layer comprises embedded magnetic particles, and 

- the sensor is a magnetic sensor, therewith enabUng measurement of a magnetic property 
of the security layer. 

2. A semiconductor device as claimed in Claim 1, characterized in that the 
magnetic sensor is a magnetoresistive sensor, therewith enabling a conversion of the 
magnetic properties into an actual value of the impedance. 

3. A semiconductor device as claimed in Claim 1 , characterized in that the 
embedded magnetic particles are distributed inhomogeneously in the security layer (53) over 
the circuit. 

4. A semiconductor device as claimed in Claim 1, characterized in that the 
magnetic particles are superparamagnetic particles embedded in microbeads. 

^- A. semiconductor device as claimed in Claim 1, characterized in that the 

magnetic particles contain a hard-magnetic material. 

^' A. semiconductor device as claimed in Claim 2, characterized in that the 

magnetoresistive sensors having an axis of sensitivity substantially parallel to die security 
layer are shaped as stripes that have a lengtii in a direction substantially perpendicular to die 
axis of sensitivity. 
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7. A semiconductor device as claimed in Claim 1, further provided with a 

memory.to store an initiaUy actual value of the impedance of the security element as 
reference value. 



8. 

1-7. 



A carrier provided with a semiconductor device according any of the Claims 



9. A card reader suitable for a carrier according td Claiffi 8, characterized in that 

magnetisation means are present ill ordtfi Lo geiieiale an cxtomol magn o tic field th a t w ill 

induce a magnetisaUon m t h^^ieticTBrticles^ubstanti^yiperpendicularaQ-the^ecu^^ 

layer. 
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10. A card reader as claimed in Claim 9, characterized in that a reference sensor is 
present for measuring the external magnetic field, so that the external magnetic field can be 

15 calibrated. 

11. A caixi reader as claimed in Claim 9, characterized in tiiat the magnetisation 
means are part of a degaussing circuit 

20 12. A method of initializing die semiconductor device according to any of the 

Claims 1-7, comprising the steps of: 

- determining an initially actual value of the impedance of tiie security element, and 

- storing tiie initially actual value as die reference value in a memory in the semiconductor 
device or in a central database device located in or connected witii die card reader 

25 according to Claim 9. 

13. A method of checking the authenticity of a semiconductor device according to 

any of die Claims 1-7. the device bemg initiaUzed according to the metiiod of Claim 12. 

comprising the steps of 
30 - determining an actual value of the impedance of the security element, and 

- reading the reference value from the memory, 

- comparing die actual value and the reference value, and 

- recognizing the auAenticity of the semiconductor device only, if the difference between 
die actual value and die reference value is smaller tiian a predefined ttireshold value. 
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14. A method of initializing or checking as claimed in Claim 12 or 13, 

characterized in that the step of determining an actual value comprises the steps of: 

- measuring an off -state value at a standard external magnetic field; 

- generating an external magnetic field to induce a magnetisation in the magnetic particles 

» 

substantially peipendicular to the security layer; 

- measuring an on-state value before the external magnetic field ik switched off, 

- determining tiie actual value of the impedance of the security element as the difference 
between the on-state value and the off-state value. 



15. A method of initializing or checking as claimed in Claim 14, characterized in 
that: 

- at least part of the magnetic particles embedded in the security layer of the sendconductor 
device contain a hardmagnetic material; and 

15 - before measuring the off-state value a preliminary treatment is done in order to remove 
existing magnetisation in the magnetic particles in the direction substantially 
perpendicular to the security layer, 

16. A method of checking the authenticity as claimed in Claim 15, characterized 
20 in that the external magnetic field is generated at a strength below the saturation 

magnetisation field of at least part of the magnetic particles. 

17. A ihethod of checking the authenticity as claimed in Claim 15, 
characterized in that the external magnetic field is alternating, while the magnitude of the 

25 field decreases to end up at a average bias field below the saturation magnetisation field of at 
least part of the magnetic particles. 

18. A method as claimed in Claims 12 or 13,^characterized in that at least part of 
the magnetic particles embedded in the security layer of the semiconductor device contain a 

30 soft-magnetic material and that the step of determining ah actual value comprises the steps 
of : 

- generating an external magnetic field to induce a magnetisation in the magnetic particles 
substantially p^endicular to the security layer; 
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measuring a first and a second value before the particles of the soft-magnetic particles are 

i 

relaxated to their saturation magnetisation; * ^ : 

determining the actual value of the impedance of the security element as the difference 
between the first and second value. 



..;e iz \l : x^.r/aoce..- . 
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ABSTRACT: 



The semiconductor device has a security coating with embedded magnetic 
particles and magnetoresistive sensors. This allows measurement of the impedance of ' 
securi|^ elements-idg^ined by magnetoresistive sensors atTdisecunty coafing. If initial- values 
of the impedance are stored, actual values can be compared therewith to see if the device has 
5 not been electrically probed or modified. Such comparison can be used to check the 
authenticity of the device. 
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